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f(D) shall be resvonsible acenerallv 
for advisina the Sec- 
retarv and the eonaues> on the status 


O the movlementation 

of t C_of title XI of the Social Security 

Act: and 

(5) bv addina at the end the followina: 

"(7) Not later than 1 vear after the date of 
the enactment Reports 
of the Health Insurance Portabilitv and 
Accountabilitv ct re) 1996. 
and annuallv thereafter. the Bou arEEe shall 
submit to t on- 
aress. and make public, a roa regarding the 
implementation 
of part. C of title XT of the Social Securitv Act. Such 


revort shall 
address the followina subiects. to the extent that 
the Committee 
determines apvvropriate: 
'(A) The Coen 1 eee persons 
reauired molv with 
vart C of title Rr of the “Sacial Securitv 
Act. are cooveratina 


in imvlementina the standards adopted 
under such part 
"(B) The extent to which such entities 
are meetina the 
securitv standards  adovoted pelasoaps 
such part and the alice 
OF penalties ares ae for Hee Sel ce 
standards. 
MC) Whether "the Federal and State 
Governments are 
pecan information of sufficient qualitv 
meet their respon- 
sibilities under such part. 

Anv vroblems that exist with 
respect to implementa- 
nom such nart. 

(E) The extent to which timetables 
under such part are 
being me 


SEC. 264. RECOMMENDATIONS WITH RESPECT TO PRIVACY OF 
CER! 42 USC 1320(1-2 
TAIN HEALTH INFORMATION. 


fote. 


(1) iN GENERAL, Not later than the date that is 12 
mon 
after th® date of the enactment of this Act} the 
Secretary of 
Health and Human Services shall submit to the 
Committee on 
Labor and Human Resources and the Committee on 
Finance of 
the Senate and the Committee on Commerce and the 
Committee 
on Wavs and Means of the House of Representatives 
detailed 
recommendations on _ standards with respect to the 
privacv oO 
individuallv identifiable health inform : 

SUBIECTS FOR RECOMMENDATIONS he 
recommendations 
under subsection (a) shall address at least the following: 
(3) The rights that an individual who is a subject of 


individ- 
ually identifiable health information should have. 
(4) The procedures that should be established for 
the exer- 
ise of such richts. 
5) The uses and disclosures of such information 
that should 
be authorized oar reciuijred. 
(c) REGULATIONS — 
(1) IN GENERAL!4f leaislation governing 
standards pie Regulations. 
respect to the privacy of individually 
identifiable health 
information transmitted in connection with the 
transactions 
described in section 1173(a) of the Social Security 
Act (as adde 
bv section 262) is not enacted bv the 


date that is 36 months 
after the date of the enactment of 
this Act. the Secretarv 
of Health and Human Services shall 
promulaate final reaula- 
tions containing such standards not 
later than the date that. 
is 42 months after the date of the 
enactment of this Act. 

Such reaulations shall address at eee 
the subjects described 


in subsection (b). 
(2) PREEMPTION2A regulation promulgated under 


araph ( (1) shall not supercede a contrary provision 
fe) 


